An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtpms | May 15, 2023 | Feb 28, 2023 |
| Centos_linux | — | Upgrade libtpmsUpgrade libtpms-debuginfoUpgrade libtpms-debugsource | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade libtpms | Jul 30, 2024 | Feb 28, 2023 |
| Msft | — | 2023-03 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5023705)2023-03 Cumulative Update for Microsoft Windows 10, version 22H2 (KB5023696)2023-03 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5023705)2023-03 Cumulative Update for Microsoft Windows 11, version 21H2 (KB5023698)2023-03 Cumulative Update for Microsoft Windows 10, version 1507 (KB5023713)2023-03 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5023697)2023-03 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5023702)2023-03 Cumulative Update for Microsoft Windows 10, version 1607 (KB5023697)2023-03 Cumulative Update for Microsoft Windows 10, version 1809 (KB5023702)2023-03 Cumulative Update for Microsoft Windows 10, version 21H2 (KB5023696)2023-03 Cumulative Update for Microsoft Windows 11, version 22H2 (KB5023706) | Mar 14, 2023 | Mar 14, 2023 |
| Oracle_linux | — | Upgrade libtpms | May 17, 2023 | Feb 28, 2023 |
| Redhat_linux | — | Upgrade hivexUpgrade libguestfs-xfsUpgrade ocaml-hivex-debuginfoUpgrade libvirt-wiresharkUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade ocaml-hivex-develUpgrade libvirt-wireshark-debuginfoUpgrade libguestfs-rsyncUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-linuxdisk-plugin-debuginfoUpgrade libvirt-daemonUpgrade libguestfs-rescueUpgrade libguestfs-java-develUpgrade libvirt-python-debugsourceUpgrade libguestfs-tools-cUpgrade virt-v2v-man-pages-jaUpgrade nbdkit-tmpdisk-pluginUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-interfaceUpgrade netcf-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkitUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-ui-spiceUpgrade seavgabios-binUpgrade sgabiosUpgrade virt-dibUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-man-pages-jaUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-hw-usbredir-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-vddk-plugin-debuginfoUpgrade swtpm-develUpgrade libguestfs-gfs2Upgrade libvirt-docsUpgrade ruby-libguestfs-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-config-networkUpgrade swtpmUpgrade nbdkit-vddk-pluginUpgrade perl-hivexUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-bash-completionUpgrade sgabios-binUpgrade hivex-debuginfoUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-server-debuginfoUpgrade qemu-kvm-block-rbdUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storageUpgrade libiscsi-debugsourceUpgrade nbdkit-python-plugin-debuginfoUpgrade qemu-kvm-debugsourceUpgrade nbdkit-debuginfoUpgrade libnbd-develUpgrade nbdkit-tar-filterUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-curl-plugin-debuginfoUpgrade libiscsi-debuginfoUpgrade nbdkit-gzip-plugin-debuginfoUpgrade qemu-kvm-commonUpgrade libvirt-dbus-debugsourceUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade superminUpgrade virt-v2v-bash-completionUpgrade qemu-kvm-ui-openglUpgrade libtpms-debugsourceUpgrade virt-v2vUpgrade libguestfs-toolsUpgrade libguestfs-debugsourceUpgrade nbdkit-serverUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade ocaml-libguestfs-develUpgrade virt-v2v-debuginfoUpgrade libvirt-develUpgrade nbdkit-python-pluginUpgrade netcf-debuginfoUpgrade libnbd-bash-completionUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-ssh-pluginUpgrade libguestfs-javaUpgrade libguestfs-develUpgrade ocaml-libguestfs-debuginfoUpgrade netcf-develUpgrade nbdfuse-debuginfoUpgrade libvirt-libsUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-iscsi-direct-debuginfoUpgrade virt-v2v-man-pages-ukUpgrade ruby-hivexUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade virt-v2v-debugsourceUpgrade libvirt-dbusUpgrade libguestfs-java-debuginfoUpgrade hivex-develUpgrade libguestfs-man-pages-ukUpgrade swtpm-toolsUpgrade ruby-libguestfsUpgrade nbdkit-develUpgrade python3-hivex-debuginfoUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-kvmUpgrade nbdkit-gzip-filter-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libguestfs-debuginfoUpgrade python3-libnbdUpgrade libiscsi-utils-debuginfoUpgrade libiscsi-develUpgrade libvirt-debugsourceUpgrade libguestfs-winsupportUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-basic-plugins-debuginfoUpgrade virt-dib-debuginfoUpgrade perl-hivex-debuginfoUpgrade nbdkit-gzip-filterUpgrade qemu-kvm-hw-usbredirUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade swtpm-debuginfoUpgrade SLOFUpgrade libvirt-daemon-driver-nodedevUpgrade ocaml-libnbd-debuginfoUpgrade nbdkit-tmpdisk-plugin-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-docsUpgrade libvirt-daemon-driver-networkUpgrade python3-libguestfs-debuginfoUpgrade swtpm-tools-debuginfoUpgrade ocaml-libnbdUpgrade libvirt-nss-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libguestfsUpgrade libguestfs-gobject-develUpgrade qemu-kvmUpgrade nbdkit-xz-filterUpgrade swtpm-libsUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-guest-agentUpgrade libnbd-debugsourceUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade swtpm-libs-debuginfoUpgrade nbdkit-nbd-pluginUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-xz-filter-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-nssUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libguestfs-bash-completionUpgrade libtpms-debuginfoUpgrade nbdfuseUpgrade libnbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade supermin-debuginfoUpgrade libtpmsUpgrade netcfUpgrade qemu-kvm-core-debuginfoUpgrade libvirtUpgrade qemu-img-debuginfoUpgrade nbdkit-nbd-plugin-debuginfoUpgrade qemu-kvm-coreUpgrade libtpms-develUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade supermin-develUpgrade netcf-libsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade hivex-debugsourceUpgrade libiscsiUpgrade qemu-kvm-testsUpgrade qemu-kvm-block-glusterUpgrade python3-libvirtUpgrade ocaml-libguestfsUpgrade ocaml-hivexUpgrade nbdkit-tar-plugin-debuginfoUpgrade netcf-libs-debuginfoUpgrade nbdkit-ssh-plugin-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gobjectUpgrade qemu-kvm-ui-spice-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade python3-libnbd-debuginfoUpgrade libguestfs-inspect-iconsUpgrade python3-libguestfsUpgrade ruby-hivex-debuginfoUpgrade nbdkit-tar-filter-debuginfoUpgrade libguestfs-applianceUpgrade libnbd-debuginfoUpgrade nbdkit-basic-filters-debuginfoUpgrade nbdkit-gzip-pluginUpgrade swtpm-tools-pkcs11Upgrade ocaml-libnbd-develUpgrade nbdkit-tar-pluginUpgrade swtpm-debugsourceUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-coreUpgrade seabiosUpgrade lua-guestfs-debuginfoUpgrade libvirt-lock-sanlockNo solution existsUpgrade libiscsi-utils | Apr 19, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade libtpms-develUpgrade libtpms0 | Apr 28, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade libtpms0 | Mar 22, 2023 | Feb 28, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub